Directory
Cybersecurity is the practitioner side of the directory, aimed at people who defend systems or investigate them. Security tools and toolkits covers scanners, frameworks, and command line utilities. Security scanners and resolvers follows with services that check a host, a certificate, or a configuration. Domain, IP, and DNS research collects lookup and reputation tools, while malware protection lists engines, sandboxes, and analysis services. Safety and risk research covers threat reports, vulnerability databases, and standards, and IoT security deals with connected devices and their firmware. Threat intelligence, malware analysis, password and hash tools, and sandboxes and emulation sit at the deeper end of the category. Check what a tool is built to do and whether you are allowed to point it at a target before you start a scan.
Frida is a dynamic instrumentation toolkit for developers, reverse-engineers and security researchers. It lets users inject their own scripts into black box processes to hook functions and trace application code, and it runs on Windows, macOS, GNU/Linux, iOS, watchOS, tvOS, Android, FreeBSD and QNX.
Hong Kong dashboard for traffic data, road conditions, and public camera views.
IANA database listing top-level domains, registry operators, and root zone delegation data.
PageGlimpse is a web tool for finding, checking, or analyzing online information related to domains, networks, and digital services.
urlscan is a web tool for finding, checking, or analyzing online information related to domains, networks, and digital services.
A guide listing known fake FitGirl Repacks websites and methods for avoiding them. It states that fitgirl-repacks.site is the only real site, that FitGirl has no social media accounts, and that fake sites can be blocked with a uBlock Origin filter or the hosts file.
HTTPToolkit is a developer resource for coding, documentation, communities, security research, or software tools.
PlowTO is a City of Toronto map service. According to the city page, the map is unavailable during the summer months while routine maintenance is completed, and the service resumes in the winter season when snow-clearing operations begin.
Quantcast is a web tool for finding, checking, or analyzing online information related to domains, networks, and digital services.
URLVoid is a free website reputation checker. It scans a website against multiple reputation and blocklist services to help determine whether it is safe or malicious, and provides a safety report with blocklist names and IP and domain details.
Verisign WHOIS lookup for checking domain registration records and registry information.
Iocaine is an aggressive defense mechanism that tries to poison AI crawlers and other unwelcome bots by serving them garbage, rather than making them go away. It is designed to be lightweight and efficient, spending as few resources as possible while making the life of crawlers more expensive. It is intended for use together with a reverse proxy.
The Network Entity Reputation Database IP search is a CESNET page that searches and lists IP addresses with hostname, ASN, country, events, reputation score, threat category, other properties, time added and last activity. It provides links to services including Shodan, Censys, AbuseIPDB, Talos Intelligence Center, Greynoise Visualizer and DShield. Results shown include DShield reports and OTX pulses.
Remote DNS Lookup is a web tool for finding, checking, or analyzing online information related to domains, networks, and digital services.
Scam documents a safety warning, scam report, malware concern, or risky download example.
Virginia traffic camera dashboard for checking live road conditions and traffic views.
Winitor's pestudio is a malware initial assessment tool. It helps identify key indicators of Windows executable files to speed up malware assessment workflows. The page states it has been enhanced since 2009.
Public traffic camera map for viewing road conditions around Baton Rouge.
MalShare is a community-driven public malware repository that provides free access to malware samples and tooling for the information security community. The site lists recently added samples with SHA256 hashes, file types and submission sources, and offers upload, search, download and API sections along with registration.
Reddit link documents a safety warning, scam report, malware concern, or risky download example.
Robtex offers free DNS lookup and network intelligence. It gathers public information about IP numbers, domain names, host names, autonomous systems and routes, indexes it in a database, and provides lookup tools including reverse DNS, Whois and AS macros.
A guide for reading VirusTotal reports. It covers steps such as checking the scan date, details tab, submitted names, relations tab, behavior tab and detections tab. The guide states that the final decision on whether to run a file is the user's.
A custom OSINT tool from Aware Online Academy for investigating a target website. It provides scripts to view historical WHOIS data, check website text and source code on third-party sites, visualise links, map web pages, check Reddit presence, find open FTP ports and find other top level domains.
Censys certificate search for exploring TLS certificates, domains, issuers, and transparency logs.
